What fraud looks like today

Fraud today rarely looks like a forged cheque or a stolen card at a till. Modern fraud is driven overwhelmingly by social engineering and leaked or purchased data: an attacker who has nothing more than an email thread, an invoice template, or a job title can impersonate someone you trust convincingly enough to move money or data out the door.

The common categories are Business Email Compromise (BEC), invoice and payment fraud, identity theft, account takeover, and insider fraud. Each exploits a different weak point, but almost all of them rely on the same thing: getting the victim to act quickly, before anyone stops to verify.

Fraud losses are rarely recovered once a payment clears — banks can sometimes claw back a same-day wire, but international transfers to fraudulent accounts are typically gone within hours. This is why prevention (catching the request before it's actioned) matters far more than detection after the fact.

• Fraud increasingly blends digital and human tactics — a single phone call can "confirm" a fake email's legitimacy.
• Attackers research their targets: job titles, org charts, and even out-of-office replies are used to time an attack.
• The goal is almost always speed: create urgency so the victim skips the verification step they'd normally take.